HP Ilo 3 User Guide
Here you can view all the pages of manual HP Ilo 3 User Guide. The HP manuals for Server are available online for free. You can easily download all the documents as PDF.
Page 41
NOTE:YoucanconfiguresomeofthesesettingsbyusingiLORBSU.Forinstructions,see“Using theiLORBSU”(page87). ToviewormodifyiLOaccessoptions: 1.NavigatetotheAdministration→AccessSettingspage. 2.ClicktheAccessSettingstabandscrolltotheAccessOptionssectionoftheAccessSettings page,asshowninFigure17(page41). Figure17AccessOptions 3.Updatethefollowingsettingsasneeded: Table2Accessoptions DescriptionDefaultvalueOption Thissettingspecifieshowlongausercanbeinactive,in minutes,beforetheiLOwebinterfaceandRemoteConsole...
Page 42
Table2Accessoptions(continued) DescriptionDefaultvalueOption ThissettingenablesordisablesiLORBSU.TheiLOOption ROMpromptsyoutopressF8tostartiLORBSU,butifiLOis disabledoriLORBSUisdisabled,thispromptisnotdisplayed. EnablediLOROM-BasedSetup Utility Thissettingdetermineswhetherauser-credentialpromptis displayedwhenauseraccessesiLORBSU.Ifthissettingis DisabledRequireLoginforiLO RBSU Enabled,alogindialogboxopenswhenyouaccesstheiLO RBSU. ThissettingenablesthedisplayoftheiLOnetworkIPaddress duringhostserverPOST....
Page 43
LoggingintoiLObyusinganSSHclient WhenauserlogsintoiLObyusinganSSHclient,thenumberofloginnameandpassword promptsdisplayedbyiLOmatchesthevalueoftheAuthenticationFailureLoggingoption(3ifitis disabled).ThenumberofpromptsmightalsobeaffectedbyyourSSHclientconfiguration.SSH clientsalsoimplementdelaysafterloginfailure. Forexample,togenerateanSSHauthenticationfailurelogwiththedefaultvalue(Enabled-Every 3rdFailure),assumingthattheSSHclientisconfiguredwiththenumberofpasswordpromptsset...
Page 44
iLORBSUsecurity iLORBSUenablesyoutoviewandmodifytheiLOconfiguration.YoucanconfigureiLORBSU accesssettingsbyusingiLORBSU,awebbrowser,RIBCLscripts,ortheiLOSecurityOverride Switch. •ForinformationaboutusingawebbrowsertoconfigureiLORBSUaccesssettings,see “Configuringaccessoptions”(page40). •ForinformationaboutusingiLORBSUtoconfigureiLORBSUaccesssettings,see“Usingthe iLORBSU”(page87). •ForinformationaboutusingRIBCLscriptstoconfigureiLORBSU,seetheHPiLO3Scripting andCommandLineGuide....
Page 45
RamificationsofsettingtheiLOSecurityOverrideSwitchincludethefollowing: •Allsecurityauthorizationverificationsaredisabledwhentheswitchisset. •iLORBSUrunsifthehostserverisreset. •iLOisnotdisabledandmightbedisplayedonthenetworkasconfigured. •iLO,ifdisabledwhentheswitchisset,doesnotlogouttheuserandcompletethedisable processuntilthepoweriscycledontheserver. •Thebootblockisexposedforprogramming. •AwarningmessageisdisplayedoniLOwebinterfacepages,indicatingthattheswitchis currentlyinuse....
Page 46
Useraccountsandaccess iLOsupportstheconfigurationofupto12localuseraccounts.Eachaccountcanbemanaged throughthefollowingfeatures: •Privileges •Loginsecurity YoucanconfigureiLOtouseadirectorytoauthenticateandauthorizeitsusers.Thisconfiguration enablesanunlimitednumberofusersandeasilyscalestothenumberofiLOdevicesinanenterprise. ThedirectoryalsoprovidesacentralpointofadministrationforiLOdevicesandusers,andthe directorycanenforceastrongerpasswordpolicy.iLOenablesyoutouselocalusers,directory users,orboth....
Page 47
NotethefollowingwhenworkingwithSSHkeys: •AnySSHconnectionauthenticatedthroughthecorrespondingprivatekeyisauthenticatedas theownerofthekeyandhasthesameprivileges. •TheiLOfirmwareprovidesstoragetoaccommodateSSHkeysthathavealengthof639bytes orless.Ifthekeyislargerthan639bytes,theauthorizationmightfail.Ifthisoccurs,usethe SSHclientsoftwaretogenerateashorterkey. •IfyouusetheiLOwebinterfacetoenterthepublickey,youselecttheuserassociatedwith...
Page 48
Figure19DSAPublicKeyImportDatabox Thekeymustbea1,024-bitDSAkey. 8.ClickImportPublicKey. DeletingSSHkeys 1.NavigatetotheAdministration→Securitypage. 2.ClicktheSecureShellKeytab,asshowninFigure18(page47). 3.SelectthecheckboxtotheleftoftheuserforwhichyouwanttodeleteanSSHkey. 4.ClickDeleteSelectedKey(s). TheselectedSSHkeyisremovedfromiLO.WhenanSSHkeyisdeletedfromiLO,anSSH clientcannotauthenticatetoiLObyusingthecorrespondingprivatekey. AuthorizingSSHkeysfromanHPSIMserver...
Page 49
TheiLOfirmwareenablesyoutocreateacertificaterequest,importacertificate,andview informationassociatedwithastoredcertificate.Certificateinformationisencodedinthecertificate bytheCAandisextractedbyiLO. Bydefault,iLOcreatesaself-signedcertificateforuseinSSLconnections.Thiscertificateenables iLOtoworkwithoutadditionalconfigurationsteps.Importingatrustedcertificatecanenhancethe iLOsecurityfeatures.UserswhohavetheConfigureiLOSettingsprivilegecancustomizeand importatrustedcertificate....
Page 50
Figure21Security–SSLCertificateCustomizationpage 3.EnterthefollowinginformationintheCertificateSigningRequestInformationsection.The requiredboxesaremarkedwithanasterisk(*)intheiLOwebinterface. •Country(C)—Thetwo-charactercountrycodethatidentifiesthecountrywherethecompany ororganizationthatownsthisiLOsubsystemislocated •State(ST)—ThestatewherethecompanyororganizationthatownsthisiLOsubsystemis located •CityorLocality(L)—Thecityorlocalitywherethecompanyororganizationthatownsthis iLOsubsystemislocated...